17jili Privacy Policy

The 17jili platform, accessible at https://17jili.org, is operated by the entity that holds the applicable PAGCOR gaming authorization for the operation of this platform ("17jili," "we," "us," or "the Company"). For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), 17jili is the Personal Information Controller (PIC) in respect of all personal data collected through the platform.

As PIC, 17jili determines the purposes and means by which your personal data is processed. Where 17jili engages third-party service providers — such as payment processors (GCash, Maya, BPI, BDO) or game providers — those entities act as Personal Information Processors (PIPs) under instructions from 17jili and within the scope of their contractual obligations to us.

This Privacy Policy applies to all personal data collected, processed, stored, and transmitted by 17jili in connection with:

• The 17jili website at https://17jili.org and all associated subdomains;
• Any mobile application operated under the 17jili brand;
• All communications between you and 17jili, including live chat, email, and SMS;
• All financial transactions conducted through the 17jili platform, including deposits via GCash, Maya, QR Ph, and Philippine bank channels.

This policy applies to all registered players, prospective registrants who interact with 17jili prior to completing registration, and any other individuals who contact 17jili directly.

This policy does not govern the privacy practices of third-party game providers, payment processors, or any other external website to which a link may appear. Users accessing those services are subject to those parties' own privacy policies.

17jili collects personal data in the categories set out below. The data collected varies depending on the nature of your interaction with the platform.

17jili collects personal data through the following means:

• Directly from you: Information you provide during account registration, identity verification, deposit and withdrawal transactions, form submissions, and support interactions.
• Automatically through platform technology: Technical data including IP addresses, device identifiers, browser information, and session activity logs are collected automatically when you access the 17jili platform. See Section 9 for details on cookies and tracking.
• From payment service providers: When you make a deposit or withdrawal via GCash, Maya, BPI, BDO, or other Philippine payment channels, relevant transaction data is received from those processors to update your 17jili Wallet and maintain financial records.
• From identity verification partners: For KYC compliance, 17jili may use a third-party identity verification service provider that processes your submitted ID documents and, where required, liveness check data. Such providers act as Personal Information Processors under contract with 17jili.

17jili processes your personal data for the following purposes. Each purpose is supported by a lawful basis under RA 10173:

• Account creation and management — to create, maintain, and administer your 17jili Account. Legal basis: Performance of contract.
• Identity verification (KYC) — to verify your identity and age (21+) as required by PAGCOR regulations and the Anti-Money Laundering Act of the Philippines. Legal basis: Legal obligation; legitimate interests in regulatory compliance.
• Payment processing — to process deposits and withdrawals to and from your GCash, Maya, or bank account. Legal basis: Performance of contract.
• Gaming services delivery — to provide access to casino games, sports betting, bingo, and all other platform features. Legal basis: Performance of contract.
• Security and fraud prevention — to detect, investigate, and prevent fraudulent transactions, unauthorized account access, and other illegal activities. Legal basis: Legitimate interests; legal obligation.
• Regulatory compliance and record-keeping — to comply with PAGCOR reporting requirements, Anti-Money Laundering Act obligations, and National Privacy Commission requirements. Legal basis: Legal obligation.
• Responsible gaming monitoring — to identify signs of potential problem gambling and apply responsible gaming tools as required by PAGCOR regulations. Legal basis: Legal obligation; legitimate interests in player welfare.
• Customer support — to respond to your inquiries, complaints, and technical support requests. Legal basis: Performance of contract; legitimate interests.
• Service improvement — to analyze platform usage patterns for the purpose of improving the 17jili user experience. Legal basis: Legitimate interests (where such analysis is conducted on aggregated, non-identifiable data).
• Marketing communications — to send you promotional offers and updates about 17jili services where you have consented to receive them. Legal basis: Consent (which may be withdrawn at any time).

17jili does not sell your personal data. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, GrabPay, and InstaPay receive the financial data necessary to process your deposit or withdrawal. Each processor is a regulated financial institution in the Philippines operating under its own applicable legal obligations.
• Game providers: Licensed game studios and live casino providers (such as Evolution Gaming, PG Soft, and Pragmatic Play Live) receive session identifiers and wallet credit data necessary to authenticate your game sessions. These providers are bound by contractual data processing terms with 17jili.
• Identity verification providers: Third-party KYC service providers process your submitted identity documents under contract with 17jili and under instructions from us, acting as Personal Information Processors.
• PAGCOR and regulatory authorities: 17jili discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory and law enforcement bodies where required by law or upon receipt of a lawful order.
• Professional advisors: Legal counsel, auditors, and accountants who are bound by professional confidentiality obligations may access personal data as necessary in the course of providing services to 17jili.

17jili retains your personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations.

• Account data and gaming records: Retained for a minimum of five (5) years from the date of Account closure, in compliance with Anti-Money Laundering Act record-keeping requirements.
• KYC and identity verification records: Retained for the duration of the Account relationship and for five (5) years following closure, or longer if required by AMLC or PAGCOR directive.
• Financial transaction records: Retained for five (5) years following the transaction date.
• Support communications: Retained for two (2) years from the date of the last interaction in the relevant support thread.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of consent history.
• Technical and log data: Generally retained for twelve (12) months, except where specific logs are required for an ongoing fraud investigation or regulatory inquiry.

Following the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be attributed to an individual data subject.

17jili implements technical and organizational security measures proportionate to the risks associated with the personal data we hold. Key measures include:

• Transport security: All data transmitted between your device and 17jili servers is encrypted via 256-bit SSL/TLS. HTTPS is enforced across all pages of the platform.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. Staff accessing player data are subject to role-based access permissions and are bound by confidentiality obligations.
• Authentication: 17jili supports two-factor authentication (2FA) for all player accounts. We strongly recommend all players enable 2FA in their Account settings.
• Data storage: Player personal data is stored on servers implementing physical, environmental, and logical security controls. Data at rest is encrypted.
• Security monitoring: 17jili employs automated and manual monitoring of platform activity to detect unauthorized access attempts, unusual transaction patterns, and potential security incidents.
• Breach response: In the event of a personal data breach that is likely to result in harm to data subjects, 17jili will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay as required by RA 10173.

17jili uses cookies and similar tracking technologies on the platform. A cookie is a small text file stored on your device by your browser. The following cookie categories are used by 17jili:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a gaming session, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences, such as language and display settings, between sessions.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players interact with the 17jili platform — which pages are visited most, where players encounter difficulties, and how navigation flows are used. This data informs ongoing platform improvements.
• Security and Fraud Detection Cookies: Used to identify unusual or potentially fraudulent behavior patterns within a session.

Most browsers allow you to control or delete cookies through browser settings. Disabling non-essential cookies will not prevent you from using 17jili, but may affect certain preference-related functionality. Blocking strictly necessary cookies will impair your ability to use the platform.

The 17jili platform is strictly restricted to individuals who are 21 years of age or older — the minimum legal age for participation in casino-style online gaming in the Philippines under PAGCOR regulations. 17jili does not knowingly collect personal data from individuals under 21 years of age.

Age is verified during the registration process and again at the point of first withdrawal through our KYC process. Where 17jili becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted, the associated Account will be closed, and the matter will be handled in accordance with our Terms & Conditions.

If you believe that a minor has registered on 17jili, please contact us immediately using the details in Section 14 so that we can take prompt corrective action.

As a Philippine data subject under Republic Act No. 10173, you have the following enforceable rights in relation to your personal data held by 17jili:

To exercise any of the above rights, please contact the 17jili Data Protection Officer using the contact details in Section 14. We will acknowledge your request within 3 business days and provide a substantive response within 10 business days. We may need to verify your identity before processing certain requests.

Certain 17jili service providers — including game studios and live casino streaming providers — operate infrastructure located outside the Philippines. Where personal data is transferred to a country outside the Philippines, 17jili ensures that such transfers are subject to appropriate safeguards, which may include:

• Standard contractual clauses approved or recognized by the National Privacy Commission;
• Transfer to jurisdictions with an equivalent standard of data protection as determined under RA 10173 implementing rules;
• The consent of the data subject to the specific transfer, where applicable.

Gaming activity data shared with provider systems is limited to the minimum data set necessary for game authentication — it does not include full KYC documents or financial account credentials.

17jili reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable Philippine law, or updates to PAGCOR regulations. The effective date at the top of this document reflects the date of the most recent revision.

Where changes to this policy are material — meaning they significantly affect your rights or how your data is used — 17jili will provide reasonable advance notice to registered players via the email address or mobile number associated with your Account, or via a prominent notice on the platform, prior to the changes taking effect.

Your continued use of the 17jili platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the revised version. If you do not accept any material change, you may close your Account in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data 17jili holds about you, please contact our Data Protection Officer:

• Method: Live chat (fastest response — available 24/7 from your logged-in 17jili Account)
• Email: [email protected] — mark your subject line "Data Privacy Request" for priority routing to the DPO team

Please include your full name and registered mobile number in any data privacy request so that we can verify your identity and process your request efficiently.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines. Information about filing a complaint with the NPC is available on the NPC's official website.